extended blockreadonly exception flag to set/add/remove role